PT-2026-42965 · Besen · Bs20 Ev Charging Station

Carfeii · Published 2026-05-24 · Updated 2026-05-24 · CVE-2026-9395

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Besen BS20 EV Charging Station versions prior to 20260426

Description An issue exists in the BLE/UDP component where an unknown function allows for the manipulation of insufficiently protected credentials. This attack must be initiated from within the local network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-9395

Affected Products

Bs20 Ev Charging Station

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-9395 · Security Note
• https://github.com/carfeii/besen#finding-2-cleartext-credential-exposure-via-ble-and-udp-in-besen-home-ev-charging-station · Note
• https://t.me/CVEtracker/54788 · Telegram Post
• https://vuldb.com/submit/813572 · Note
• https://vuldb.com/vuln/365376 · Note
• https://vuldb.com/vuln/365376/cti · Note